Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Malwarebytes Found Chin.Ad

  • Please log in to reply
3 replies to this topic

#1 benta


  • Members
  • 31 posts
  • Local time:08:37 AM

Posted 18 November 2017 - 09:52 PM

Yesterday my Malwarebytes found adware known as "Chin.Ad", but I don't think I have done anything that could infect my PC with adware. And the strange thing is the adware was created back in 2016 according to the "Date modified & Date created". I run Malwarebytes two - three times a week, but it didn't find anything until now?


-Log Details-
Scan Date: 11/18/17
Scan Time: 6:58 AM
Log File: bdec7302-cc57-11e7-add9-902b342ee3c2.json
Administrator: Yes
-Software Information-
Components Version: 1.0.212
Update Package Version: 1.0.3289
License: Expired
-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: tbhben-PC\tbhben
-Scan Summary-
Scan Type: Custom Scan
Result: Completed
Objects Scanned: 394090
Threats Detected: 8
Threats Quarantined: 8
Time Elapsed: 3 hr, 39 min, 58 sec
-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect
-Scan Details-
Process: 0
(No malicious items detected)
Module: 0
(No malicious items detected)
Registry Key: 0
(No malicious items detected)
Registry Value: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Data Stream: 0
(No malicious items detected)
Folder: 6
Adware.ChinAd, E:\101\Users\tbhbht\AppData\Roaming\SecuROM\UserData, Quarantined, [547], [458285],1.0.3289
Adware.ChinAd, E:\101\Users\tbhbht\AppData\Roaming\SecuROM, Quarantined, [547], [458285],1.0.3289
Adware.ChinAd, E:\101\Users\tbhbht\AppData\Roaming, Quarantined, [547], [458285],1.0.3289
Adware.ChinAd, E:\101\Users\tbhbht\AppData, Quarantined, [547], [458285],1.0.3289
Adware.ChinAd, E:\101\Users\tbhbht, Quarantined, [547], [458285],1.0.3289
Adware.ChinAd, E:\101\Users, Quarantined, [547], [458285],1.0.3289
File: 2
Adware.ChinAd, E:\101\Users\tbhbht\AppData\Roaming\SecuROM\UserData\ЃϵϳЅЂϿϽϯІχϯπρϴϱЄϱЃϵϳЅ , Quarantined, [547], [458285],1.0.3289
Adware.ChinAd, E:\101\Users\tbhbht\AppData\Roaming\SecuROM\UserData\ЃϵϳЅЂϿϽϯІχϯπρЂϻϵЉЃϵϳЅ , Quarantined, [547], [458285],1.0.3289
Physical Sector: 0
(No malicious items detected)

Edited by benta, 19 November 2017 - 08:40 AM.

BC AdBot (Login to Remove)


#2 benta

  • Topic Starter

  • Members
  • 31 posts
  • Local time:08:37 AM

Posted 19 November 2017 - 06:42 PM


#3 Jaycan


  • Members
  • 461 posts
  • Gender:Male
  • Local time:11:37 PM

Posted 19 November 2017 - 08:43 PM

I am not an expert, but please follow these directions,

Please post a reminder >> Here https://www.bleepingcomputer.com/forums/t/400074/please-post-in-this-topic-if-you-have-not-received-help-after-three-days/#entry2222675 for Am I Infected logs that be overlooked.
Or follow the directions from Here >> https://www.bleepingcomputer.com/forums/topic34773.html if you think the infection is still there and active.
Do not BUMP your post as it is done on a First come First served order, and you will simply reset the order.

Thank You.

Acer Computer with LG Monitor and Toshiba Laptop with Windows 7.1

Windows 64bit  8.1 - Always fully updated

Firefox / Google Chrome / Internet Explorer Browsers

Usually a home helper here or with friends and nimble fingered ladies who would rather sew or dust, but not clean the bugs out of a computer ...

#4 buddy215


  • Moderator
  • 13,323 posts
  • Gender:Male
  • Location:West Tennessee
  • Local time:07:37 AM

Posted 20 November 2017 - 06:51 AM

benta..welcome to BC


If you think this might be a false positive then post your inquiry at the Malwarebytes Forum. Do not delete those files that have been quarantined until you get a response

from Malwarebytes as to whether they are legit or not. (I think it is a false positive...but can't confirm it from my own searches)


FROM WIKIPEDIA: SecuROM is a CD/DVD copy protection and digital rights management (DRM) product developed by Sony DADC. It aims to prevent unauthorised copying and reverse engineering of software, primarily commercial computer games running on Microsoft Windows.

Edited by buddy215, 20 November 2017 - 07:22 AM.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users